Privacy Policy

This policy explains what Fibona AI (“we”) collects when you use fibona.ai, Fibona Agent and the Fibona iPhone app, what we do with it, and which services we share it with.

What we collect

• Your account. When you sign in with GitHub, X or Google, we receive your name, email address (if the provider shares it), profile picture and account ID. We keep your sign-in sessions, and a record of each iPhone signed in to your account.
• Model requests. Every request the agent sends to a language model through us, and its response. They carry your prompts and whatever code, files and output the agent includes. We keep them so you can come back to your work, and to count usage against your daily budget.
• Your sandbox. On the web, the agent runs in a cloud sandbox of your own, which holds the files it creates.
• How you use the website. Pages visited, clicks, browser and device details, and session recordings, collected through PostHog (below). The iPhone app sends no analytics.
• Waiting list. The email address you give us, to tell you when the iPhone app is ready.

In the iPhone app, the agent runs on your phone: what it builds stays there, and only its model requests reach us. If you set it to use your own model API, those go straight to that provider instead, and we see none of them.

Services we share it with

• PostHog (product analytics and session replay). It records the pages you visit, what you click, and session replays of the website and the agent’s interface, including what you type there; password fields are always masked. Once you sign in, these are tied to your account ID, name and email. See PostHog’s privacy policy.
• OpenRouter (access to language models). The agent’s model requests, from the website or the iPhone app, are sent in full to OpenRouter, which passes each one on to the model’s provider (such as Anthropic, OpenAI or Google) for the answer. See OpenRouter’s privacy policy; the model provider’s own policy applies to what it receives.
• DeepSeek. Requests to DeepSeek’s models, including Fibona’s default model, go to DeepSeek directly rather than through OpenRouter. See DeepSeek’s privacy policy.
• GitHub, X and Google handle sign-in. We never see your password for them.
• Our hosting, database and storage providers, which keep the data above on our behalf.

We don’t sell your data, and we don’t show ads.

How long we keep it

As long as your account exists. When you ask us to delete your account, we delete it along with your sessions, sandbox and model requests.

Your choices

• Email [email protected] to get a copy of your data, to correct it, or to delete your account.
• Signing out of the iPhone app (hold the spiral button to reset it) ends that phone’s access right away.
• Blocking PostHog’s cookies or scripts in your browser stops the analytics.

Children

Fibona is not meant for anyone under 13, and we don’t knowingly collect their data.

Changes

When this policy changes, we update it here and change the date at the top. For significant changes, we’ll also tell you on the website or by email.

Contact

Questions about your privacy: [email protected].